Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

0
votes
0answers
6 views

How can I use mod_auth_cas to authenticate Moodle?

What I want For various reasons, I'd like to see the following authentication procedure work: go to moodle.blah.bla Apache asks for your login information via mod_auth_cas Once authenticated, ...
0
votes
1answer
1k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
21
votes
6answers
43k views

Google Chrome: passthrough Windows authentication

The I.T. dept is considering allowing installation and automated deployment of Google Chrome browser to 100+ desktops. One of the requirements is for domain credentials to be passed through. The ...
0
votes
0answers
6 views

Error deploying VMware Integrated Openstack OVF on vCenter 6

I'm trying to deploy an OVF from VMware Integrated Openstack at my vCenter 6, but now it was showing an "Operation time out" message. Before, it was showing the message "the operation is not allowed ...
12
votes
4answers
17k views

How does SSO with Active Directory work whereby users are transparently logged in to an intranet web app?

I'm told that it's possible to make a web application that does not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able ...
1
vote
1answer
1k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
1
vote
2answers
2k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
1
vote
1answer
84 views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
0
votes
0answers
20 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant ...
0
votes
0answers
23 views

SAML/OpenID authentication on Docker/Core OS

I have a set of servers running Core OS/Docker/Docker Swarm. I have my users in a SAML/OpenID SSO server. I want these users to be able to run Docker containers on my Core OS cluster. How do I ...
13
votes
5answers
6k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
0
votes
0answers
22 views

Apache SSO (mod_sspi)

I am trying to implement an auto login function into my mediawiki by using their windows credentials. I am using Apache Server (V2.2). I have implemented the Auth remoteuser extension and has ...
0
votes
0answers
15 views

Apache2.2 Mod:mod_auth_sspi with cross domain

I've setup Apache 2.2 with mod_auth_sspi 1.0.4 on Windows Server 2012 R2 and try to authenticate on our PHP website from the server in domainA to the domain controller in domainB. This is the sspi ...
0
votes
0answers
41 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
2answers
84 views

Apache 2.2 mod_auth_kerb SSO stopped working

I'm all out of ideas why has it just stopped working, here's what I checked: httpd-error.log: [Thu Jun 11 18:04:21 2015] [debug] src/mod_auth_kerb.c(1758): [client 10.105.5.131] ...
1
vote
1answer
27 views

Office 365 SSO presenting two signon boxes when using ADFS Proxies

I have the following setup- we use an external, third-party load balancer to forward traffic to one of our two ADFS Proxies (in the DMZ) which in turn forward to one of our two ADFS servers. ...
4
votes
0answers
80 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
0
votes
1answer
69 views

Reverse Proxy single sign-on

I have a reverse proxy handling ssl termination and mod_security. The issue is after sso reaches the backend server it tries to authenticate with cas directly instead of the through the proxy still, ...
0
votes
1answer
54 views

Kerberos SSO virtualhost different domain

I have a running centos6.6 server who authenticates against a windows 2008 AD with realm EXAMPLE.LOCAL. I have successfully configured an apache webserver for authentication through kerberos keytab ...
0
votes
0answers
55 views

OpenAM 12.0 IDP SOAP based SLO not working on https

I am trying to configure OpenAM with my own certificate having alias other than "test" as per the document http://docs.forgerock.org/en/openam/12.0.0/admin-guide/index/chap-certs-keystores.html over ...
2
votes
1answer
77 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
1
vote
2answers
257 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
2
votes
2answers
110 views

IBM WebSphere Application Server SSO does not set REMOTE_USER on Cognos BI 10.2.2

Very similar issue was posted here, I do not believe they are the same. IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly We are running IBM Cognos Business Intelligence Server ...
2
votes
1answer
1k views

problems creating a keytab file on win server

I am trying to create a keytab file. i see a warning WARNING: pType and account type do not match. This might cause problems. The command i use is ktpass -princ ...
0
votes
0answers
122 views

IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly on Cognos BI 10.2.1

I am running IBM Cognos Business Intelligence Server 10.2.1 (no other extra software products) on WebSphere Application Server 7, both softwares on an AIX server. I am trying to configure LTPA SSO ...
2
votes
1answer
72 views

vSphere/vCenter not offering SSO options

We started setting up a vSphere infrastructure and want to use OpenLDAP as authentication source. In the vCenter, we have enabled the embedded SSO server and I find options to connect to Active ...
2
votes
2answers
146 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
-4
votes
2answers
121 views

How to use multiple User login name to authenticate to AD - UPN

How can I assign multiple User login names to an AD user so he/she can authenticate seamlessly. Here's an example: User name 1: FJohnson User name 2: domain\Fjohnson User name 3: FJohnson@domain.com ...
1
vote
1answer
35 views

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any ...
0
votes
1answer
290 views

php REMOTE_USER variable

I am trying to setup mediawiki with SSO. I was able to set up authentification with domain, but I cannot setup SSO. For some reason, $_SERVER['REMOTE_USER'] variable is not set. I looked into some ...
0
votes
1answer
27 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
1
vote
2answers
359 views

“User with an existing Microsoft account” cannot access app using Azure AD SSO

Yesterday I followed Vittorio Bertocci's tutorial "WS-Federation in Microsoft OWIN Components – a quick start" to set up a test application using Azure AD authentication. This is my first use of ...
0
votes
0answers
223 views

How do I configure Azure Active Directory to provide Windows Authentication in multi-tenant IIS ASP.NET web apps?

I have been doing some tests with Azure Active Directory trial license in my data center. Our company has our own hosting services and physical hardware, and for now we would like to keep it that way ...
2
votes
1answer
165 views

Office 365 with Azure AD - can I allow SSO for another 3rd party SAML app externally?

I'm shooting a little blind here in that I'm not an Azure expert and don't really mess with it yet beyond O365 and DirSync. We have a 3rd party app written in Ruby on Rails that they are saying is ...
2
votes
3answers
1k views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
1
vote
0answers
127 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
1
vote
1answer
186 views

What is wrong with my SAML Response? (Office365 SSO)

I have been trying to federate an Office365 domain for some time now with no luck. I have gotten to the point in which I receive a request and am able to generate a response based off that, but don't ...
4
votes
1answer
378 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
2
votes
1answer
2k views

Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect

I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way # cat .htaccess AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab ...
0
votes
1answer
108 views

Have ADFS 2 Prompt for Username Password

Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
1
vote
0answers
25 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
11 views

VCenter and SSO Database

We are using external dedicated Database Server During VCenter SSO installation RSA Database got created using the script (RSA_DATA.mdf,RSA_INDEX.ndf,translog.ldf)and pointed the SSO to it Now During ...
0
votes
0answers
66 views

Weblogic SSO and IIS Windows Authentication

I have a windows 2008 server running both IIS and weblogic server 12c. I have a java application on the box that needs to run under the weblogic server and several ASP.NET applications that need to ...
3
votes
0answers
17 views

Possible to import Office365 users into local active directory domain? [duplicate]

My company has an office365 setup for all employees. We also have just implemented a domain controller locally which we want to use to authenticate a few things here in the office. The problem is that ...
-2
votes
2answers
256 views

ADFS 2.0 is already configured and different application is using it, I want to use the same ADFS for my application

ADFS is already configured on servers. Different application is using it for Single Sign on. I want to use same aDFS server to implement single sign on in my application. Any checklist please from ...
1
vote
0answers
84 views

JBoss SPNEGO Authentication Renewing Server Kerberos Tickets

We have successfully configured SPNEGO with our webapp on JBoss EAP 6.2, Windows Server 2008, and IE10 using JBoss Negotiation. What is best operational practice for renewing the ticket issued to ...
0
votes
1answer
129 views

ADFS only allows local browsers and Safari on one Mac to access the verification webpage

So I've setup a Windows 2012 R2 box with AD DS, SQL Server, and AD FS so one of our developers can test out SSO. The problem is, the test webpage, https:///adfs/ls/idpinitiatedsignon, only works ...
3
votes
2answers
581 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
0
votes
2answers
156 views

Apache/mod_auth_gss authentication failure

Sorry if this is the wrong stackexchange site for this. Based upon the documentation (for reference I also used this blog post) I have this in httpd.conf: # Increase max size of HTTP request headers ...
0
votes
1answer
57 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...